[Date Prev][Date Next] [Chronological] [Thread] [Top]

Restricting Object Classes of Entries Added



If a user has permission to add or remove entries from a tree, is it 
possible (in OpenLDAP) to restrict the entries added to a particular 
object class?

For example, suppose I have a user with add/remove access to the
"ou=Group,dc=example,dc=com" tree.  I only want that user to be able to
add entries that are of object class "posixGroup" and nothing else.

If this functionality is not included in OpenLDAP now, is it going to be
included in the future?

Thanks,
Christoph